bpf: always try rt lookup and only relax if from tunnel
bpf: always try rt lookup and only relax if from tunnel

If we got a packet from tunnel and we got a NAT miss and we got a route
miss, assume that it is a service IP and since we got a NAT miss, assume
a nodeport in amulti NIC scenario.

The NAT miss might have been just a temporary miss and we might treat
another service IP wrongly as a nodeport. This should be a subject of
runtiem configuration.

Metaswitch/calico,neiljerram/felix,neiljerram/felix,neiljerram/felix,neiljerram/felix,Metaswitch/calico